Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa
File:                     62cac302-3527-3ef3-beab-cc5a3b35a766.roa (raw, json)
Hash identifier:          /UZ3rlYIhqsc6zJKURIXLk80ccoyjMbDwIQXUZch1WA=
Subject key identifier:   38:E3:B4:C5:F4:22:0F:14:4C:D6:EC:71:FB:27:29:4B:A1:44:D8:87
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F4328584A7BB0B350FCC56D0807523A80
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     20317
IP address blocks:        23.140.60.0/24 maxlen: 24
                          2602:f8a2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b3:50:fc:c5:6d:08:07:52:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=d65dc2d2-3341-40fe-9b87-3df953999e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:72:4d:d1:a8:0a:41:49:99:1a:65:02:9a:
                    90:f3:c1:f4:7a:26:07:8b:bf:79:33:27:83:21:bc:
                    b4:30:3c:38:7b:71:53:3f:ae:4b:97:bf:01:be:a1:
                    14:b9:f0:c8:b2:e3:4f:fd:82:c5:c9:4b:d7:ca:16:
                    f3:ed:fe:f2:93:d6:c2:79:fa:98:34:df:f5:1f:86:
                    39:0c:fd:a1:7a:2a:11:d0:72:19:a4:13:03:2b:5b:
                    02:15:fe:c5:b4:f7:d6:98:bf:ae:fd:78:07:a5:6d:
                    dc:19:01:eb:13:d7:b3:9e:e0:f0:e1:9b:ef:34:03:
                    27:df:ec:98:f9:36:77:ee:3e:6c:f5:73:5f:15:3b:
                    55:69:cb:e7:53:b4:ec:6d:a2:64:1a:18:fd:1d:cb:
                    2d:e0:a8:00:a2:69:87:cb:9e:07:cb:89:8c:51:6c:
                    e1:7c:34:15:cd:2f:10:59:54:85:b8:3d:76:56:97:
                    50:a7:a2:a7:5f:c7:0f:53:f7:5a:28:0e:09:90:57:
                    e0:a6:9d:d3:27:d4:aa:89:de:c8:21:b9:65:76:93:
                    57:76:df:d1:02:89:de:20:c7:c0:7d:41:2f:5f:73:
                    7f:3c:7b:70:2c:b9:a6:9f:42:38:ca:1d:4b:be:49:
                    72:ed:83:8d:82:ea:1b:51:62:4f:aa:d4:ca:c1:eb:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:B4:C5:F4:22:0F:14:4C:D6:EC:71:FB:27:29:4B:A1:44:D8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.60.0/24
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:43:b6:4a:11:0f:e9:52:d9:5c:b7:64:3d:05:4e:bf:e1:fb:
         e0:e7:f2:6c:7c:30:68:7a:1a:d2:78:10:94:26:8a:1e:f0:67:
         fd:51:8d:2b:b1:da:fa:f6:1b:87:ff:64:46:a1:62:32:17:49:
         70:18:7f:5c:b4:94:38:cf:85:78:63:16:e7:dc:26:e8:f2:24:
         f1:68:35:45:77:08:fb:e6:41:2e:7c:40:f4:21:81:a2:54:8f:
         26:b6:80:37:38:95:e6:6d:62:f7:c0:59:5a:1d:f4:90:31:4c:
         46:b6:d7:d8:ef:4c:70:00:6b:6f:75:5d:9a:97:9c:02:0f:31:
         02:a3:84:64:2e:49:8d:5f:41:99:83:8d:c9:bf:e6:af:c8:1c:
         46:df:0b:ee:e5:d1:8c:20:35:a4:2d:d9:99:43:0d:9d:3a:bf:
         14:29:d4:63:38:04:be:54:86:f0:5a:9d:fb:bd:74:bc:83:92:
         fe:d9:ef:64:be:5b:60:92:98:88:fa:43:4d:12:98:ab:72:f0:
         47:72:b7:ab:f2:ff:68:19:34:02:7a:55:57:76:52:15:13:e3:
         bd:0b:cd:70:16:f3:b3:58:ac:3e:3e:e7:20:96:0f:e6:66:c5:
         c9:fe:cc:c6:10:c9:e4:97:67:ea:3b:6e:21:b4:b0:82:7c:c8:
         bd:01:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:54 2025 by rpki-client